Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
File:                     3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa (raw, json)
Hash identifier:          +nn2/m/uJzDrZFgNKIGfAarxfUKuH0Uvr13QPF651u0=
Subject key identifier:   F1:8B:3D:3E:D5:E7:AE:BC:15:D7:C8:6A:75:F7:A9:B2:D3:6B:0C:66
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584E508490C0DA332553B5AD5720
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     12189
IP address blocks:        2607:6004:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:90:c0:da:33:25:53:b5:ad:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=039c553e-0a1c-428c-8e5c-816a623d3e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:d0:dd:4d:76:c9:ff:41:62:28:39:00:73:
                    72:67:c9:ec:73:ea:17:2e:a4:4e:43:bf:da:fd:b1:
                    e1:e8:dd:c8:fe:a1:1c:76:69:19:de:cf:df:47:82:
                    c5:d0:79:63:8e:11:b9:97:a7:a7:27:85:28:60:da:
                    6d:76:9e:c2:bb:b2:f6:93:d9:6b:ae:49:41:58:c9:
                    38:b0:47:9f:2d:de:cd:46:0b:35:43:3a:bf:d3:7f:
                    c1:52:4b:7b:28:52:e1:ee:8b:d5:14:10:e1:25:5d:
                    2d:e6:66:e2:44:18:27:53:03:d0:33:f9:c6:92:86:
                    e6:6c:16:be:1a:83:e8:76:e8:12:31:23:07:5e:9b:
                    8c:5c:77:6d:0a:dc:9d:1a:c0:86:b4:4f:1f:d3:81:
                    36:5b:28:9a:38:bc:af:bf:bf:b5:0e:69:88:94:69:
                    00:f7:47:5c:09:f4:0f:0c:a0:97:3b:54:47:f9:15:
                    36:37:cd:fb:ef:5b:3e:9b:f9:e5:6a:a6:90:ac:58:
                    b0:f9:be:4f:20:72:78:7b:ba:c8:a2:5a:96:ca:68:
                    6a:0e:ca:a7:3a:9c:b6:76:cd:38:06:df:9f:4b:9a:
                    40:3b:a5:be:93:91:68:ba:e5:a3:ef:13:c0:6e:1a:
                    47:bc:b4:05:a2:86:96:bf:8b:6e:20:0c:fc:ae:30:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:3D:3E:D5:E7:AE:BC:15:D7:C8:6A:75:F7:A9:B2:D3:6B:0C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6004:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:94:5c:04:60:64:9d:ec:c6:74:5d:bf:e7:ba:b9:64:f9:
         ef:2b:c6:4e:1a:67:25:b3:fc:0f:1b:ec:94:2e:60:15:d8:6b:
         e2:d8:83:98:32:4c:89:a8:43:ca:af:ec:db:ec:ec:5e:63:5a:
         48:8d:05:36:1a:c1:ff:96:35:d8:08:db:4e:6a:ad:54:c4:69:
         8c:31:bb:c9:42:0d:d4:7e:5d:0b:74:18:35:e4:5b:e7:43:75:
         45:73:94:a3:d2:8d:82:de:cd:f3:e4:0c:63:43:1c:91:d8:fa:
         5c:06:87:17:bf:85:6c:c9:9d:c2:f1:38:d5:26:d8:8e:8d:3a:
         54:a1:07:5d:fd:56:99:6d:30:e1:4d:7b:30:cd:ae:28:fc:4d:
         b5:e7:a7:57:05:83:d8:ec:d3:74:aa:5c:c9:6c:19:af:ca:f6:
         4c:0d:5c:58:b6:bb:4a:55:b5:ea:0d:7e:22:63:91:c7:88:e7:
         36:78:a3:25:93:18:62:82:0d:13:b6:bb:87:42:38:48:c9:73:
         40:1b:25:ae:b6:cd:93:62:d1:e6:e6:b9:ed:94:cd:ce:5c:e4:
         db:1d:3b:e8:39:d3:68:42:77:3c:da:9d:44:62:17:29:86:83:
         2f:e3:f9:5d:b1:c6:fe:c5:06:d2:e4:2f:8d:c5:bb:bc:57:41:
         97:c3:7b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 19:47:20 2026 by rpki-client